NVD

Id
61912  
Name
CVE-2006-3233  
Description
Cross-site scripting (XSS) vulnerability in openwebmail-read.pl in Open WebMail (OWM) 2.52, and other versions released before 06/18/2006, allows remote attackers to inject arbitrary web script or HTML via the from field. NOTE: some third party sources have mentioned the "to" and "from" fields, although CVE analysis shows that these are associated with the previous version, a different executable, and a different CVE.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-06-27  
Modified Date
2011-03-07  
Seq
2006-3233  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
320493 61912 CVE-2006-3233 http://openwebmail.acatysmoof.com/dev/svn/index.pl/openwebmail/diff/trunk/src/cgi-bin/openwebmail/openwebmail-read.pl?rev1=236;rev2=237  View
320494 61912 CVE-2006-3233 http://openwebmail.org/openwebmail/doc/changes.txt  View
320495 61912 CVE-2006-3233 20060626 Openwebmail: 2 XSS vulns not one, and some version hints  View
320496 61912 CVE-2006-3233 18598  View
320497 61912 CVE-2006-3233 ADV-2006-2485  View
320498 61912 CVE-2006-3233 openwebmail-read-xss(27309)  View

Related JVN